Time from 1st ACK to 1st DATA.

Time from (SYNACK to 1st DATA) – client delay.

Time from SYN to 1st DATA.

Time from SYN to 1st ACK.

MSSQL

Informix

PostgreSQL

MySQL

Oracle

DB2

A downloadable customized view from the online Cascade community.

Any view that is applied to live devices and dynamically updated.

A view that can be created after drill-down from one view to another.

Any view that was created by applying a traffic filter.

All views within Cascade Pilot are considered interactive views.

WAN Optimization Benefits reports, Breakdown of business versus non-business application reports, QOS reports by interface and/or application.

WAN Optimization of all TCP protocols with more specific optimization of over 50 TCP Applications.

WAN reporting of TCP Protocols.

QOS shaping, User-based policies that will block not compliant traffic, WAN optimization reporting.

Response Time

Layer 4 Application Classification Mapping

Layer 7 Application Classification Mapping

Network Throughput

Network Round Trip Time

A Notice that an Event has occurred

A Notice that a report is ready to be emailed

A Notice that a Policy has initialized

A Notice that a query has completed

All of the Above

None of the Above

TRUE

FALSE

An optional module that is licensed separately and not available in the Cascade Pilot Personal Edition (PE) product.

A module that automatically generates expert reports of traffic selection in PDF format.

The source of packet traffic – either a device or a packet capture file.

Network traffic analysis displays that can be applied to traffic.

A packet filter

A disk space allocation

One capture port or one aggregated port

Trend/indexing parameters

All of the above

High Speed Capture, Transaction Analyzer

Packet Analyzer, Packet Download Manager

Packet Analyzer, High Speed Capture

Packet Analyzer, Transaction Analyzer

Cascade will de-duplicate/Coalesce data from all sources, both flow and sensor data. Other vendors have you look at each source’s data separately

Cascade Profiler will provide nanosecond granularity from flow data to detect micro-bursts.

Cascade can also accept SNMP traps from other devices.

Cascade integrates with sflow but not NetFlow.

250GB

500GB

750GB

1TB

Maximum flow capacity.

Maximum number of operational analytics.

Maximum number of users supported.

Maximum number of available reports.

HTTP over TCP/80 and HTTPS over TCP/445

HTTP over TCP/80 and HTTPS over TCP/443

HTTP over TCP/443 and HTTPS over TCP/80

HTTP over TCP/445 and HTTPS over TCP/80

HTTP over TCP/88 and HTTP over TCP/444

By importing a display or capture filter from Wireshark.

By saving the filter applied in a View.

Only when you are connected to a Cascade Shark.

Only before applying a View.

Ten

Four

Unlimited

Twenty

Windows 7 SP 1

MAC OS X

Windows 8

Windows 8.1

use mirror ports or passive taps to collect data from a network segment.

can forward packets to other network management systems.

provide deep packet inspection to identify the application being accessed by a host.

can decrypt secure protocols.

communicate with Profiler appliance using compressed and encrypted data.

100,000 Flows per Minute

200,000 Flows per Minute

300,000 Flows per Minute

400,000 Flows per Minute

500,000 Flows per Minute

600,000 Flows per Minute

Front-end request to back-end connection mapping in Citrix XenApp environments.

User-to-Citrix desktop mapping in Citrix XenDesktop environments.

Citrix desktop server resource utilization measurements.

Optimized traffic response times through the Riverbed SteelHead CX model appliances.

Real-time Citrix decodes.

Syslog

SNMP

HTML

Facebook

PDF

You can track, report and alert on organizationally meaningful categories of traffic

To control access to Cascade data

To quickly quarantine hosts affected by a virus

To increase the scalability of the Cascade database

To view the traffic of many hosts from multiple perspectives

You MUST connect to the Cascade Shark through its web interface, export packets to a packet capture (pcap) file, then from within Cascade Pilot you can open the pcap file.

You MUST use a Cascade Gateway to view packet data on Cascade Shark.

You MUST use a Cascade Profiler to view packet data on Cascade Shark.

You can simply connect to the Cascade Shark appliance directly from Cascade Pilot provided that proper network communication is available between Cascade Pilot and Cascade Shark.

You can simply connect to the Cascade Shark appliance directly from Cascade Pilot provided that a capture job has already been configured from the Cascade Shark Web Interface and proper network communication is available.

Bandwidth Utilization and Storage Utilization

Encryption Algorithms used

Signal to Noise Ratio of Fiber Optic Links

User Access Roles per Data Set

Bandwidth Utilization and Application Performance

SYN Flag observed

FIN Flag observed

Zero Window Size observed

MTU size observed

Retransmission observed

TRUE

FALSE

A technique used to send Flow data from a switch or router.

A technique used to copy packet data traversing a switch or router to a packet capture device from a passively monitoring port on the switch or router.

A technique used to connect into a live link in a network using a network-tap in order to send all packet data traversing the live link to a packet capture device.

A technique for placing a link on a switch or router in loopback mode for troubleshooting purposes.

Provide structure in the application model

Manually created

Can be expanded or collapsed

All of the above

They are cached for later processing.

They are ignored/dropped.

The user is able to choose which flows to keep and which to ignore.

All flows are processed but an alert is sent to the user.

One or all views from the main workspace.

Notes entered associated with a view.

Analyst and Client information entered.

A and B.

A, B and C.

Packets across all the ports of an appliance.

Packets on a single physical capture port.

Packets on an aggregating capture port.

Packets across different Cascade Shark appliances.

An evaluation license of the software to remain active for a period longer than the default license period.

A selected portion of a packet capture (pcap) file to be opened in Cascade Pilot from a larger capture file.

A view applied to a packet capture (pcap) file to be limited to the time period selected.

Watches to be scheduled to alert the user at a pre-defined time.

Fault Management

Application Performance Management (APM)

Network Behavior Analysis (NBA)

Flow based Network Monitoring and Analysis